Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3b30cb1efd58a53e56fd091581383b4485cf674e.roa
File:                     3b30cb1efd58a53e56fd091581383b4485cf674e.roa (raw, json)
Hash identifier:          MxMTwTaQp+7qGaH+VCZGQBYPQL3/yjskS5GH01JPtyE=
Subject key identifier:   2C:56:AD:CC:1B:A3:24:AB:49:40:2B:FB:ED:DA:E0:85:2A:06:23:BB
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A5CB1
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3b30cb1efd58a53e56fd091581383b4485cf674e.roa
Signing time:             Thu 22 Sep 2022 20:34:49 +0000
ROA not before:           Thu 22 Sep 2022 20:34:22 +0000
ROA not after:            Sun 22 Sep 2024 20:34:22 +0000
asID:                     3790
IP address blocks:        190.241.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727665 (0x1a5cb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:34:22 2022 GMT
            Not After : Sep 22 20:34:22 2024 GMT
        Subject: CN=3b30cb1efd58a53e56fd091581383b4485cf674e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:03:0f:15:e2:f2:4b:cd:a1:dd:43:2d:cf:f3:
                    54:47:88:93:85:ba:33:30:ff:a5:cb:df:6f:a7:55:
                    eb:23:15:d1:14:57:a3:ee:32:80:63:ee:bc:18:e3:
                    3c:84:11:e4:fa:63:3b:5b:d8:63:8c:75:79:f8:0a:
                    28:67:96:f8:e9:2f:59:c0:70:9e:ca:7b:94:06:1a:
                    43:51:a0:c5:4d:1a:a0:bd:ec:92:db:ab:9e:c3:b4:
                    c6:69:d4:c1:01:9b:e5:37:c5:fc:91:53:28:e7:04:
                    c0:30:bd:bb:99:ab:55:e1:13:12:12:88:46:1d:4c:
                    af:28:dd:0f:75:be:60:2e:4a:28:f3:15:91:df:af:
                    72:f1:8f:5b:fb:7b:7c:66:7a:5c:97:ca:be:dc:e1:
                    b0:61:83:c6:57:fd:3d:6c:e4:4c:da:be:fa:3d:db:
                    4f:35:6d:aa:f5:23:7f:5e:83:b1:04:9a:bc:94:d1:
                    5d:2f:3f:f0:04:54:f7:15:80:6d:42:76:4d:2b:6c:
                    2c:35:e7:31:29:d6:ca:df:63:28:c7:2a:56:eb:d5:
                    b3:f5:fc:b1:ad:8a:13:5f:ef:3e:4f:aa:02:94:d2:
                    cb:1f:3a:d3:6b:f5:3a:f8:b6:2f:96:09:bc:70:0a:
                    41:80:ba:73:49:97:a4:3f:f6:0f:2c:07:02:34:81:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:56:AD:CC:1B:A3:24:AB:49:40:2B:FB:ED:DA:E0:85:2A:06:23:BB
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3b30cb1efd58a53e56fd091581383b4485cf674e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:92:eb:73:01:bb:f5:b2:b2:5b:de:60:b8:44:b2:30:e1:c1:
         27:41:3b:8b:e4:5a:fc:f3:1e:70:b7:04:95:70:f2:c5:7c:f5:
         ed:b8:7f:de:54:55:c3:c5:e7:6a:d0:4a:10:0a:e2:4d:5f:c5:
         af:c0:c3:f1:75:27:d1:84:4c:44:93:db:5f:eb:59:00:08:21:
         b0:85:74:40:ae:fb:e1:8e:fd:fc:ba:50:fd:bd:61:3c:87:b5:
         10:6e:a6:7e:78:4b:dd:8c:a7:80:96:9d:b6:7a:d4:b5:ee:0d:
         ed:7b:bc:22:0c:40:1a:44:30:3e:cf:37:9a:06:79:5e:0f:3c:
         ff:6c:b4:cf:6d:56:21:30:78:6b:97:87:dd:0f:c9:e4:95:25:
         ea:09:d5:bf:a7:c0:ab:2f:20:0f:eb:a4:1f:e3:d9:95:39:5a:
         08:5e:4e:12:84:18:19:7d:e4:4b:ea:16:cc:d7:82:9c:26:a3:
         d3:06:43:73:a9:3f:cd:e4:c3:07:7e:b2:de:ef:6b:f4:f9:eb:
         eb:8d:87:0f:28:9d:76:15:75:95:db:fc:dd:e4:1d:a7:9d:58:
         7d:d8:c0:b3:21:b7:58:75:a7:f9:75:cc:70:0a:41:ca:14:94:
         4e:71:ee:b9:83:2a:25:3f:82:a8:f6:67:52:38:37:03:9d:80:
         5f:3d:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org